This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa File: 3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa (raw, json) Hash identifier: HiCD2aNFCD2gdPv7DAFPyFKNJzqsvNngQzMJGV9Hy3A= Subject key identifier: 99:07:87:28:76:4F:74:60:72:8B:8D:C2:CA:F4:34:03:ED:0F:F2:31 Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Certificate serial: 452EACC5AAAAA3F1EFA6D13C4D0DFD7185B4ED04 Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa Signing time: Fri 09 Jan 2026 06:20:11 +0000 ROA not before: Fri 09 Jan 2026 06:15:11 +0000 ROA not after: Fri 08 Jan 2027 06:20:11 +0000 asID: 266178 IP address blocks: 138.97.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2e:ac:c5:aa:aa:a3:f1:ef:a6:d1:3c:4d:0d:fd:71:85:b4:ed:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Validity Not Before: Jan 9 06:15:11 2026 GMT Not After : Jan 8 06:20:11 2027 GMT Subject: CN=99078728764F7460728B8DC2CAF43403ED0FF231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:56:3b:82:17:fa:9b:49:31:19:4f:cf:39: 6b:6f:cd:c5:83:f7:71:dc:55:8e:38:39:fc:f2:4e: 4f:3d:fe:30:29:81:0b:8d:56:21:98:6c:66:af:cf: db:1d:38:a0:70:bf:d5:fb:c1:01:b2:38:2a:41:bd: 7b:83:73:16:63:7c:e5:c9:c2:94:c6:01:99:8c:3c: e0:a4:d3:72:ee:bc:39:50:80:87:ba:60:da:d9:3a: 85:4d:ff:b0:af:23:f0:a1:76:ec:6d:c7:29:0e:da: d4:bf:13:3a:b6:e2:a2:e9:2f:41:0a:78:2e:9e:3e: 81:d1:df:09:1c:2f:60:02:60:bc:08:e0:92:8b:3b: 0f:83:01:57:fc:b5:3b:99:de:fa:5f:bb:f5:bf:e8: 35:40:5e:9f:3e:10:81:c8:49:ee:82:cd:f6:d2:ee: 5e:4c:65:84:26:ca:16:e1:c9:f9:c8:24:bb:3d:71: 95:33:e3:47:9d:05:53:c3:11:37:2e:13:86:75:7e: fa:88:f4:23:db:19:9b:0c:21:23:bf:37:c3:31:a8: fa:e5:04:26:02:d8:cb:dd:14:6e:06:fa:d9:d0:a5: 9c:b0:40:c9:68:b2:3c:6a:dc:8c:11:4c:b5:87:8a: 41:c2:45:15:9c:46:0d:a6:30:ff:54:4e:34:9f:4b: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:87:28:76:4F:74:60:72:8B:8D:C2:CA:F4:34:03:ED:0F:F2:31 X509v3 Authority Key Identifier: keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.145.0/24 Signature Algorithm: sha256WithRSAEncryption 29:a2:57:10:d5:da:21:a5:5a:a9:83:cd:22:ad:87:b5:ab:75: 85:e9:b2:ae:dd:5e:ef:bc:e3:15:cb:b0:2f:f1:68:e4:23:2b: 4c:d9:99:1f:24:71:1e:bf:58:fd:1e:10:3b:0b:2f:93:5c:2d: 99:42:15:b6:3a:47:8d:65:d8:67:2c:38:be:75:89:01:b1:67: 55:1c:d4:bb:d1:0c:30:56:36:c3:c0:6e:af:3e:af:de:de:ba: 89:2a:a6:5d:75:61:d6:85:4c:4c:c6:cf:65:c6:f8:38:d7:2c: 2a:77:44:b6:26:d3:53:44:c6:48:a3:6f:d9:af:b5:07:d2:02: b4:2d:6e:79:94:3a:2c:c5:56:3b:91:06:9b:c8:8d:87:c5:07: 5c:04:8f:9c:26:42:de:76:25:28:0c:a9:64:a6:cb:b4:76:04: b0:54:ec:9d:45:0e:14:79:40:b8:05:8c:50:45:7c:08:cf:70: df:64:cc:ed:33:e1:32:50:93:79:5a:bc:e2:bd:c9:0b:c9:d1: eb:ff:e9:e0:36:13:52:0f:78:a6:a2:dc:3c:0b:24:c2:bd:22: 05:e6:3c:90:7a:77:05:54:09:04:b2:a7:ec:19:96:21:f7:99: 0f:d2:f3:e7:43:13:d8:aa:7c:72:b9:e6:e3:46:46:9b:ad:1f: 38:f7:42:ae -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIURS6sxaqqo/HvptE8TQ39cYW07QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF QkMzQkI5MDAeFw0yNjAxMDkwNjE1MTFaFw0yNzAxMDgwNjIwMTFaMDMxMTAvBgNV BAMTKDk5MDc4NzI4NzY0Rjc0NjA3MjhCOERDMkNBRjQzNDAzRUQwRkYyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuV1Y7ghf6m0kxGU/POWtvzcWD 93HcVY44OfzyTk89/jApgQuNViGYbGavz9sdOKBwv9X7wQGyOCpBvXuDcxZjfOXJ wpTGAZmMPOCk03LuvDlQgIe6YNrZOoVN/7CvI/ChduxtxykO2tS/Ezq24qLpL0EK eC6ePoHR3wkcL2ACYLwI4JKLOw+DAVf8tTuZ3vpfu/W/6DVAXp8+EIHISe6CzfbS 7l5MZYQmyhbhyfnIJLs9cZUz40edBVPDETcuE4Z1fvqI9CPbGZsMISO/N8MxqPrl BCYC2MvdFG4G+tnQpZywQMlosjxq3IwRTLWHikHCRRWcRg2mMP9UTjSfSyX1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmQeHKHZPdGByi43CyvQ0A+0P8jEwHwYDVR0j BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzMxRUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEv MzEzMzM4MmUzOTM3MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzYzMTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKYZEwDQYJKoZIhvcNAQELBQADggEBACmiVxDV 2iGlWqmDzSKth7WrdYXpsq7dXu+84xXLsC/xaOQjK0zZmR8kcR6/WP0eEDsLL5Nc LZlCFbY6R41l2GcsOL51iQGxZ1Uc1LvRDDBWNsPAbq8+r97euokqpl11YdaFTEzG z2XG+DjXLCp3RLYm01NExkijb9mvtQfSArQtbnmUOizFVjuRBpvIjYfFB1wEj5wm Qt52JSgMqWSmy7R2BLBU7J1FDhR5QLgFjFBFfAjPcN9kzO0z4TJQk3lavOK9yQvJ 0ev/6eA2E1IPeKai3DwLJMK9IgXmPJB6dwVUCQSyp+wZliH3mQ/S8+dDE9iqfHK5 5uNGRputHzj3Qq4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:08:16 2026 by rpki-client